kcmldapcontroller/src/ldapcontroller.cpp

/***************************************************************************
 *   Copyright (C) 2012 by Timothy Pearson                                 *
 *   kb9vqf@pearsoncomputing.net                                           *
 *                                                                         *
 *   This program is free software; you can redistribute it and/or modify  *
 *   it under the terms of the GNU General Public License as published by  *
 *   the Free Software Foundation; either version 2 of the License, or     *
 *   (at your option) any later version.                                   *
 *                                                                         *
 *   This program is distributed in the hope that it will be useful,       *
 *   but WITHOUT ANY WARRANTY; without even the implied warranty of        *
 *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
 *   GNU General Public License for more details.                          *
 *                                                                         *
 *   You should have received a copy of the GNU General Public License     *
 *   along with this program; if not, write to the                         *
 *   Free Software Foundation, Inc.,                                       *
 *   59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             *
 ***************************************************************************/

#include <tqlayout.h>

#include <klocale.h>
#include <kglobal.h>
#include <kparts/genericfactory.h>
#include <ksimpleconfig.h>
#include <kglobalsettings.h>
#include <kstandarddirs.h>
#include <kurlrequester.h>
#include <klistview.h>
#include <kopenwith.h>
#include <kpropertiesdialog.h>
#include <kio/job.h>
#include <tqdir.h>
#include <tqheader.h>
#include <kcombobox.h>
#include <kmessagebox.h>
#include <tqcheckbox.h>

#include "ldapcontroller.h"
#include "realmwizard.h"

// FIXME
// Connect this to CMake/Automake
#define KDE_CONFDIR "/etc/trinity"

#define ROLE_WORKSTATION 0
#define ROLE_REALM_CONTROLLER 1

typedef KGenericFactory<LDAPController, TQWidget> ldapFactory;

K_EXPORT_COMPONENT_FACTORY( kcm_ldapcontroller, ldapFactory("kcmldapcontroller"))

LDAPController::LDAPController(TQWidget *parent, const char *name, const TQStringList&)
    : KCModule(parent, name), myAboutData(0)
{
	TQVBoxLayout *layout = new TQVBoxLayout(this, KDialog::marginHint(), KDialog::spacingHint());
	m_systemconfig = new KSimpleConfig( TQString::fromLatin1( KDE_CONFDIR "/ldap/ldapconfigrc" ));
	m_systemconfig->setFileWriteMode(S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH);

	KAboutData* about = new KAboutData("ldapcontroller", I18N_NOOP("TDE LDAP Controller"), "0.1",
		I18N_NOOP("TDE LDAP Controller Control Panel Module"),
		KAboutData::License_GPL,
		I18N_NOOP("(c) 2012 Timothy Pearson"), 0, 0);
	
	about->addAuthor("Timothy Pearson", 0, "kb9vqf@pearsoncomputing.net");
	setAboutData( about );

	m_base = new LDAPControllerConfigBase(this);
	layout->add(m_base);

	m_base->systemRole->clear();
	m_base->systemRole->insertItem("Workstation", ROLE_WORKSTATION);
	m_base->systemRole->insertItem("Realm Controller", ROLE_REALM_CONTROLLER);
	
	setRootOnlyMsg(i18n("<b>LDAP controller settings take effect system wide, and require administrator access to modify</b><br>To alter the system's realm controller settings, click on the \"Administrator Mode\" button below."));
	setUseRootOnlyMsg(true);

	connect(m_base->systemEnableSupport, TQT_SIGNAL(clicked()), this, TQT_SLOT(changed()));
	connect(m_base->systemEnableSupport, TQT_SIGNAL(clicked()), this, TQT_SLOT(processLockouts()));
	connect(m_base->systemRole, TQT_SIGNAL(activated(const TQString&)), this, TQT_SLOT(systemRoleChanged()));

	load();

	if (getuid() != 0 || !m_systemconfig->checkConfigFilesWritable( true )) {
		m_base->systemEnableSupport->setEnabled(false);
	}

	processLockouts();
};

LDAPController::~LDAPController() {
}

void LDAPController::systemRoleChanged() {
	if (m_base->systemRole->currentItem() != m_prevRole) {
		if (m_base->systemRole->currentItem() == ROLE_REALM_CONTROLLER) {
			// Verify that this workstation was not already bonded to an LDAP realm!
			bool bonded = false;
			TQStringList cfgRealms = m_systemconfig->groupList();
			for (TQStringList::Iterator it(cfgRealms.begin()); it != cfgRealms.end(); ++it) {
				if ((*it).startsWith("LDAPRealm-")) {
					m_systemconfig->setGroup(*it);
					if (m_systemconfig->readBoolEntry("bonded", false) == true) {
						bonded = true;
					}
				}
			}
		
			if (bonded) {
				KMessageBox::error(0, i18n("<qt>You are already bonded to a realm!<p>Please unbond from all realms before selecting a Realm Controller role</qt>"), i18n("Common Sense Failure"));
				m_base->systemRole->setCurrentItem(0);
			}
			else {
				// Something will probably change
				save();
			
				RealmWizard realmwizard(this, this);
				if (realmwizard.exec() < 0) {
					// Wizard was cancelled
					// Back out all changes!
					m_base->systemRole->setCurrentItem(ROLE_WORKSTATION);
					save();
				}
			
				// Something probably changed
				load();
			}
		}
		if (m_base->systemRole->currentItem() == ROLE_WORKSTATION) {
			// RAJA FIXME
		}
	}
}

void LDAPController::processLockouts() {
	bool enabled = (m_base->systemEnableSupport->isEnabled() && m_base->systemEnableSupport->isChecked());

	m_base->systemRole->setEnabled(enabled);
}

void LDAPController::load() {	
	m_systemconfig->setGroup(NULL);
	m_base->systemEnableSupport->setChecked(m_systemconfig->readBoolEntry("EnableLDAP", false));
	TQString ldapRole = m_systemconfig->readEntry("LDAPRole", "Workstation");
	if (ldapRole == "Realm Controller") {
		m_base->systemRole->setCurrentItem(ROLE_REALM_CONTROLLER);
	}
	else {
		m_base->systemRole->setCurrentItem(ROLE_WORKSTATION);
	}
	m_prevRole = m_base->systemRole->currentItem();
}

void LDAPController::defaults() {
	//
}

void LDAPController::save() {
	m_systemconfig->setGroup(NULL);
	m_systemconfig->writeEntry("EnableLDAP", m_base->systemEnableSupport->isChecked());
	m_systemconfig->writeEntry("LDAPRole", m_base->systemRole->currentText());

	m_systemconfig->sync();

	if (m_base->systemEnableSupport->isChecked()) {
// 		// Write the Kerberos5 configuration file
// 		writeKrb5ConfFile();
// 		// Write the LDAP configuration file
// 		writeLDAPConfFile();
// 		// Write the NSSwitch configuration file
// 		writeNSSwitchFile();
// 		// Write the PAM configuration files
// 		writePAMFiles();
// 		// Write the cron files
// 		writeCronFiles();
	}

	load();
}

int LDAPController::buttons() {
	return KCModule::Apply|KCModule::Help;
}

TQString LDAPController::quickHelp() const
{
	return i18n("This module configures an LDAP Realm Controller.");
}